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Abstract 

On September 22, 2012, NSF announced its decision to fund a three-year project, 

Models for Information Assurance Education and Outreach (MIAEO). In the first year of grant 
operation, MIAEO has invited 18 high school students, two K-12 teachers, and two CSUB 
student assistants to conduct research explorations in the fields of network security and 
cryptography. The hands-on investigation was led by the PI and Co-PI in 2013 summer, and 
produced five poster presentations through Research Experience Vitalizing Science - University 
Program (REVS-UP) at California State University, Bakersfield. In addition, MIAEO faculty 
worked on curriculum developments in Information Assurance (IA) across multiple departments, 
and organized a public symposium to expand IA education for approximate 120 community 
members. Methods employed in this evaluation report include document examinations, 
participant surveys, and social network analyses. The qualitative and quantitative findings lead 
to four recommendations to sustain the ongoing progress. 
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Models for Information Assurance Education and Outreach: 

A Report on Year 1 Implementation 

Development of cyberspace has extensively impacted our national priorities in 
commerce, education, energy, financial services, healthcare, manufacturing, and defense. In 
response, NSF has designated a CyberCorps: Scholarship for Service (SFS) program to support 
cybersecurity education and workforce development. On September 22, 2012, NSF awarded a 
standard grant to California State University, Bakersfield (CSUB). The project, “Models for 
Information Assurance Education and Outreach” (MIAEO), is designed to enhance capacity of 
cybersecurity in higher education. 

This report provides a summary of MIAEO accomplishments during the first year of NSF 
funding. In particular, MIAEO includes three core components to address the dual emphasis of 
SFS on preparation of cybersecurity professionals: 

(1) High School Outreach: Concurrent enrollment of high school students to support hands- 
on research in a four- week summer program; 

(2) College Curriculum Development: Enhancement of multidisciplinary IA education for 
undergraduate students of Computer Science (CS) and Global Intelligence and National 
Security (GINS) programs; 

(3) Community Education Opportunity: Engagement of community partners to create a free 
course and a lecture series for increasing IA literacy. 

While Component (1) is built on expansion of Research Experience Vitalizing Sciences - 
University Program (REVS-UP) sponsored by Chevron in 2013 summer session, components (2) 
and (3) represent expansion of cybersecurity education beyond the capacity of existing programs 


at CSUB. 
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Creative Features of MIAEO 

Unlike most local projects with limited impact, a goal of MIAEO is to “develop models 
for information assurance and outreach that can be implemented on a regional and national scale 
to increase interest in the field of information assurance and increase the capacity for high- 
quality education. ” [1] Starting in the first year, the project has adopted both confirmatory and 
exploratory approaches in capacity building. More specifically, high school outreach efforts 
facilitated reconfirmation of REVS -UP accomplishment through team-based research inquiries. 
Meanwhile, MIAEO included exploratory components to enrich curriculum development at 
CSUB and education opportunities for the greater Bakersfield community. Besides addressing 
the local needs, MIAEO followed professional practice with proven records in community 
engagement. 

REVS-UP 

REVS-UP originated from a grant award from NSF’s Geosciences Opportunities for 
Enhancing Diversity program in 2004. The seed money has led to recruitment of additional 
funding from Chevron to (1) increase content knowledge of K-12 science teachers and (2) 
expand pipelines of professionals in science, technology, engineering, and mathematics (STEM). 
The impact of REVS-UP has been demonstrated in four fronts during past seven years: (1) The 
number of applications has grown from 38 in 2007 to 386 in 2013; (2) A total of 26 faculty, 90 
CSUB students, 84 K-12 teachers and 384 high school students participated in authentic 
scientific inquiries at college labs; (3) Over 70% of student participants were in college-bound, 
more than twice of the state-reported 33.2% for Kem High School District; (4) Almost 50% of 
the college-bound students were admitted in the University of California system, more than 10 


[1] p. 3 of http://www.cs.csub.edu/~melissa/cv.pdf 
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times of the college-admission rate for this region. 

Merit of the summer bridge program hinges on concurrent enrollment of high school 
students in higher education. Although countries in East Asia have shown better student 
performance in international assessments (see Martin, Mullis, Foy, & Stanco, 2012; Mullis, 
Martin, Foy, & Arora, 2012), concurrent enrollment was not allowed in those education systems. 
Consequently, high school students in those countries have to confine their learning experiences 
within a rigid boundary of College Entrance Examination. In reflection, researchers found that 
concurrent enrollment in the U.S. offered students an early start of higher education (Berliner & 
Biddle, 1995), and thus, “high school students are encouraged to dig into the rich mine of 
knowledge from college curricula” (Wang, 2013a, p. 13). Despite the claim of education crisis 
in a well-known report, “A Nation at Risk”, trend data from the past three decades showed 
persistent support of science and mathematics education to sustain vitality of U.S. economy in 
global market competition (Berliner, 2013). 

In addition to the involvement of high school students, REVS-UP sponsored participation 
of K-12 teachers and CSUB student assistants in hands-on investigations. With the NSF 
funding, REVS-UP has added network security and cryptography as new dimensions of inquiry 
in 2013 summer session. The team-based research has supported 18 high school students to 
rejuvenate IA research interest, two CSUB students to gain internship experiences, and two K-12 
teachers to enhance subject competency through project developments. 

Curriculum Development 

IA is defined as a set of measures that protect and defend information systems to ensure 
their availability, integrity, authentication, confidentiality, and nonrepudiation (Stamm, 2011). 
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Because of the widespread needs, “The development of a model curriculum in Information 
Assurance would directly benefit academia, industry, and government agencies” (Park, 2010, p. 
17). 

Since security is more dependent on people than on technology, MIAEO has embedded 
the multidisciplinary nature in curriculum development. As Cegielski (2008) acknowledged, 
“The interdisciplinary nature of the professional practice of information assurance increases the 
complexity associated with modeling a curriculum designed to prepare students for professional 
practice” (p. 44). In the first year, the P.I. (professor of computer science) and Co-P.I. (professor 
of mathematics) gained their department endorsement to share a new IA course, MATH/CMPS 
475 - Applied Cryptography . Two elective courses, CMPS 445 - Data Mining and Visualization 
and CMPS 451 - Vulnerability Analysis (CMPS 474 in the grant proposal), have been added to 
broaden the IA knowledge base. Those course proposals have gone through a multilevel 
approval process. 

In addition, development of new IA courses also includes consideration of professional 
pedagogy. Momeau (2006) pointed out, “In the traditional training approach, the idea is to be 
able to transfer a body of knowledge of the profession to learners. Unfortunately, this does not 
take into consideration how people become professionals” (p. 22). To solve this issue, Goel et 
al. (2006) suggested, 

Objectivism and constructivism are two distinct theories about learning that can be 
applied to IA education. ... Objectivism propagates rote learning via memorization and 
feedback. ... In the constructivist approach, students construct their own knowledge by 
actively participating in learning. This approach values collaboration, the autonomy of 
the student, reflectivity, and active engagement. Such a teaching philosophy provides a 
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rich learning environment for students, in which they may explore learning independently 
and draw conclusions for themselves, (p. 4) 

In all new courses developed from MIAEO, a 150-munite lab session has been included each 
week to accommodate hands-on activities in IA research. A cybersecurity research laboratory 
has already been established to support inquiries in those elective courses for Computer Science 
majors. Hence, the merit of the new IA curriculum is built on generalizable practices of hands- 
on learning. As Bhagyavati (2006) pointed out, “Information assurance courses are most 
effective when they utilize hands-on activities” (p. 5). 

Community Outreach 

National Research Council (2011a) pointed out, “Personal and societal decisions in the 
21st century increasingly require scientific and technological understanding. ... Targeting all 
students, not just those who will pursue postsecondary education or careers in STEM or STEM- 
related fields, will better prepare citizens to face the challenges of a science- and technology- 
driven society” (p. 5). Thus, enhancement of public education cannot be solely confined within 
students of the professional field. To broaden the outreach effort, the third component of 
MIAEO is to offer a community course and a lecture series for increases of IA knowledge among 
general citizens. 

As Geo et al. (2006) observed, “Developing course material for IA requires experts from 
several disciplines. Students interested in the curriculum also come from a variety of 
backgrounds, including public policy, law, computer science, business, and information science” 
(p. 10). Besides using the expertise of PI and Co-PI in computer science and mathematics, 
development of the community course (PLSI 377) was led by Dr. Mark A. Martinez, Director of 
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the Global Intelligence and National Security program and Professor in the Department of 
Political Science. The PLSI 377 course setting covers generic topics of cybersecurity concerns 121 . 

In addition, first session of the public lecture series was held on May 15, 2013 by a panel 
of experts from CSUB, the local FBI field office, the FBI Sacramento region office, Edwards Air 
Force Base , and Aera Energy. This collaborative endeavor not only expanded the partnership 
building among the local stakeholders, but also reflected the virtue of STEM education for both 
specialists and general citizens (National Council of Teachers of Mathematics, 2000; National 
Research Council, 2011b). 

Research Questions 

The NSF guideline stipulates that “All proposals must describe plans for data 
management and sharing of the products of research. ” 2 [3] Following the proposed plan of 
MIAEO, Year 1 implementation includes completion of the first REVS-UP summer session in 
2013, as well as initiation of the course development and community outreach components. 
Accordingly, three research questions are developed for this annual evaluation report: 

1. What are the accomplishments of 2013 REVS-UP projects in IA inquiries? 

2. What is the impact of course development and community outreach? 

3. What recommendations are derived from this report to sustain the ongoing progress? 

Methods 

Multilevel data have been gathered to assess the impact of REVS-UP during 2013 
summer session. The team-based research products are represented by poster presentations to 
summarize project development in network security and cryptography. Quality of the IA 

[2] p. 11 of http://www.csub.edu/PoliSci/programinfo/gradreq.doc 

[3] http://www.nsf.gov/pubs/2012/nsfl2585/nsfl2585.htm 
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projects is evaluated on six dimensions, Context of and Purpose for the Poster, Content 
Development, References and Evidence, Composition and Format, Conclusions and Related 
Outcomes, and On-site Explanation. In each dimension, a project is rated at four levels, 
Emerging, Basic, Proficient, and Exemplary. In combination, the instrument incorporates 
important features of a widely-used rubric, “Valid Assessment of Learning in Undergraduate 
Education” (VALUE). Over past three years, this instrument has been field-tested successfully 
by both REVS-UP and Student Research Scholarship (SRS) programs at CSUB (Wang, 2013b). 

To triangulate evaluation findings within the local context, a school rating scale is 
adopted from greatschools.com according to student performance on state-required tests. A 
NetDraw software package has been employed to support a social network analysis (SNA) of 
student affiliations across different high schools (Borgatti, 2002). In addition, survey responses 
have been collected to assess attitude improvements of REVS-UP participants under a 
pretest/posttest setting (Question 1). 

As an ongoing process, curriculum development is described in this report to support 
improvement of MIAEO implementation according to the Utility, Propriety, Feasibility , and 
Accuracy standards from Joint Committee on Standards for Educational Evaluation (Yarbrough, 
Shulha, Hopson, & Caruthers, 2010). Meanwhile, baseline records have been established from 
participant feedback to track enhancement of community outreach during Year 1 implementation 
(Question 2). On basis of the quantitative and qualitative findings for Questions 1 and 2, this 
report concludes with four recommendations to sustain program effectiveness (Question 3). 

Evaluation Findings 

REVS-UP Project 

In 2013 summer session, the PI worked with eight high school students, one teacher, and 
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one CSUB student to conduct research in the area of network security. The team-based inquiries 
resulted in two poster presentations, “Crack Me If You Can: Using GPU Machines to Crack 
Passwords” (CMIYC) and “Defense Against Human Hacking”, at conclusion of the summer 
session. The Co-PI concurrently worked with 10 high school students, one teacher, and one 
CSUB student on research projects in cryptography, and produced three poster presentations, 
“Zero Knowledge, We Know Everything ... !”, “Elliptic Enigma”, and “Factor Fiction”. NSF 
funding has been employed to compensate faculty mentors, CSUB student assistants, and high 
school teachers. 

According to the original MIAEO budget allocation, NSF contributes $500 to support 
each high school student. Since high school students traditionally received $700 for their REVS- 
UP participation in other STEM projects, additional funding has been provided by Chevron 
Cooperation to amend the gap of $200 per student, and thus, maintain the equity of project 
support. Acknowledgement of those supports has been made in Appendix 1: Poster 
Presentations of Five IA Research Projects. 

All REVS-UP projects entered a competition for research awards. One of the IA 
projects, CMIYC, has been rated at the highest Exemplary rank on five dimensions, (1) Context 
of and Purpose for the Poster, (2) Content Development, (3) Composition and Format, (4) 
Conclusions and Related Outcomes, and (5) On-site Explanation. In the sixth dimension, 
CMIYC also reached the Proficient level for References and Evidence Examinations. On a scale 
of 1 (lowest) to 4 (highest), the peer-review results show an average of 2.9 rating across five IA 
projects. Hence, the Year 1 outcome already showed a near 3.0 (or “proficient”) rating at the 


MIAEO program level. 
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More importantly, to enhance generalizability of the REVS-UP model for IA education, 
MIAEO did not confine high school participants within a particular gender or ethnic group. 

Table 1 shows participation of an approximately equal number of male and female students from 
five different ethnic groups. 

Table 1: Student Distribution across Gender and Ethnic Categories* 



*One missing response occurred in the gender and ethnicity data collection. 


In addition, student participants are drawn from diversified high schools. In Figure 1, 
school names are indicated by circles, and students in the network security and cryptography 
groups are represented by diamond and square symbols, respectively. School rankings range 
from 1 for the worst to 10 for the best, and are developed by greatschools.com according to 
student performance in state-mandated tests. The plot of Netdraw (Borgatti, 2002) shows 
involvement of traditionally-underserved students from high-needs schools, such as Arvin, 
Foothill, and Highland high schools (Figure 1). 
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Figure 1: Student Affiliation Across Diversified Schools 
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Accompanied to the background evaluation is an assessment of attitude changes among 
high school students toward IA investigation. Under a pretest/posttest setting, high school 
students selected Likert-scale responses (5 = strongly agree, 3 = neutral, 1 = strongly disagree) to 
two statements: 

A. I am excited about this activity. 

B. I feel confident that I am prepared for this activity. 

At the introductory stage of REVS-UP investigation, IA exploration could strengthen 
humble attitudes among students. As Confucius pointed out, “The more a man leams, the more 
he knows his ignorance” [4] . According to the assessment outcome, the mean responses to 
Statements A and B were 4.35 and 3.59 in pretest, respectively. The corresponding results 
changed to 4.31 and 3.38 in the posttest. Although the sample size was too small to test 
statistical significance, the descriptive results have confirmed a reciprocal relationship between 


[4] p. 1 of http://novel.jschina.com.cn/yingyuwenxue/yinghmy/yinghanmingyanl5.htm 
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IA learning and attitude adjustment during 2013 REVS-UP session. 

Meanwhile, there was no change in average responses of high school students toward the 
following items: 

C. I am interested in computer security. 

D. I am interested in going to college. 

For Statement C, the average response remained in the “agree” category for both pretest and 
posttest. For Statement D, students unanimously chose the “strongly agree” option as their 
responses. Hence, while students developed more humble attitudes toward IA inquiries, they 
demonstrated stronger positive attitudes toward college education. 

The multiple-choice results are supported by open-ended responses from REVS-UP 
participants. Both teachers and high school students indicated the IA investigation as a new field 
of their learning experiences. Teachers recognized the benefit of hands-on research for high 
school students in the university setting. CSUB faculty mentors and student assistants were also 
rated in “very supportive” or “supportive” categories by high school participants. In 
combination, the results indicated that a community of learners has emerged from the REVS-UP 
platform to extend mutual support in the process of team-based IA inquiries. 

Curriculum Development 

For more than three decades, Joint Committee on Standards for Educational Evaluation 
advocated four attributes, utility, feasibility, propriety, and accuracy, to guide program 
improvement (Yarbrough. Shulha, Hopson, & Caruthers, 2010). Those attributes are articulated 
in this section to facilitate enhancement of IA education across multiple disciplines. 

In the first year of MIAEO implementation, utility consideration is reflected by alignment 
of course sequence for IA-related programs in the university catalog. In the MIAEO proposal, 
CMPS 474 was the label for a new IA course on vulnerability analysis. Because the content is 
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highly complementary to CMPS 450 - Compilers , the course number has been changed into 
CMPS 451 to improve program coherence. 

Meanwhile, course sequence has been established to streamline knowledge development. 
Two new courses, CMPS 445 - Data Mining and Visualization and MATH/CMPS 475 - Applied 
Cryptography , are arranged sequentially in Winter and Fall of 2014 prior to the offering of 
CMPS 451. To strengthen IA education in the GINS program, PLSI 304 - International 
Relations and CRJU 440 - Terrorism have been converted from electives to required courses. 

Another change to the original proposal is to reversely move CMPS 476 and 
MATH/CMPS 475 from program requirements to elective courses. Because those courses are 
offered every other year, this change has enhanced feasibility of program completion for 
computer science majors. In addition, GEOL 450 has been incorporated in the GINS program to 
provide GIS tools. This change has reduced excessive requirements of both CIS and behavioral 
analysis tools in the cognate courses. Other improvements to strengthen feasibility include 
adding CMPS 295 - Discrete Mathematics as a parallel course option for CMPS 215 - Unix 
Programming Environment. Similarly, CMPS 350 - Programming Languages has been adopted 
as an alternative option for CMPS 376 - Computer Networks. Students are allowed to take those 
parallel or alternative courses toward program completion. 

Given the multidisciplinary nature of MIAEO, the propriety feature is illustrated by 
development of a useful website to facilitate dissemination of advisory handouts for students of 
all IA-education groups [5] . While the grant proposal indicated 193-198 units for concentration in 
information security, the accuracy consideration has led to adjustment of the total unit to 180 to 


[5] http://www.cs.csubak.edu/~melissa/gins.php 
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conform to unit reductions in general education. As a result, curriculum development activities 
in the first year include content alignment, course scheduling, curriculum adjustment, and 
information dissemination to support enhancement of IA education at CSUB. 

Community Engagement 

“It is envisioned that IA will work with state and local government entities, healthcare 
providers throughout the state, and the other state institutions of higher learning (as well as the 
K-12 community) to improve the security of all of our data networks and computer systems” 
(Carr, 2010, p. 1). Therefore, community engagement is an integral part of MIAEO 
implementation. 

In the evening of May 15, 2013, a Cyber Security Panel Discussion was held for the 
public to strengthen community engagement in IA education^. Approximately 120 audiences 
attended this event. Table 2 shows positive feedback from students of CMPS 340 and PLSI 377 
toward the panel discussion. In particular, the survey results reconfirmed attractiveness of this 
event - more than 78% of the respondents would attend similar events in the future (Table 2). 


[6] http://www.csub.edu/pac/news/2013/spring/CSUB-hosts-panel-discussion-on-Cyber- 
Security-Challenges . shtml. shtml 
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Table 2: Student Feedback from Cybersecurity Panel Discussion on May 15, 2013 


Item 


Frequency of Student Responses (Blue: CMPS 340; Red: PLSI 377) 


The panel 
met my 
expectations 



4 5 6 

FREQUENCY 


I learned 
helpful 
information 
at this event 


Strongly Disagree 
Disagree 
Uncertain 
Agree 
Strongly Agree 



FREQUENCY 


I would 

take 

similar 

events 

in the 

future 



FREQUENCY 


According to Lev Vygotsky (1978), a seminal educator, learning outcomes are more 
positive when teaching activities can be clearly designated within “the zone of proximal 
development” (ZPD). ZPD represents distance between the actual development level of the 
learners and the level of potential development in collaboration with more capable peers and 
experts. In comparison, PLSI 377 is designed for novices, and thus, ZPD is easier to identify at 
the introductory level. CMPS 340 is built on CMPS 215, and covers investigative techniques, 
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evidence handling procedures, forensics tools, digital crime reconstruction, and legal guidelines. 
Table 2 indicates that the panel discussion for community members seems to fit the ZPD of most 
PLSI 377 students, leading them to express more appreciation of this event than their peers in 
CMPS 340. 

In summary, MIAEO has achieved positive outcomes in all three components, REVS-UP, 
Curriculum Development , and Community Outreach. More importantly, those accomplishments 
were made cost-effectively: (1) REVS-UP has leveraged additional funding from Chevron 
Cooperation to support participation of high school students in IA research projects; (2) Features 
of utility, feasibility, propriety, and accuracy are incorporated in curriculum development to 
support additional program improvements under the original budget configuration; (3) In 
preparing for the community outreach event, staff of CSUB President’s office arranged various 
logistics with no cost to the grant, including (i) getting the university library to donate the 
Reading Room for the panel discussion, (ii) getting Associated Students Inc. (ASI) to sponsor the 
reception before the event, and (iii) having student clubs help with the event setting up and 
cleaning up. Altogether, the broad-based support is grounded on a close alignment between this 
NSF grant and CSUB’s vision statement, i.e., “By 2014-15, CSU Bakersfield will be the leading 
campus in the CSU system in terms of faculty and academic excellence and diversity, quality of 
the student experience, and community engagement” [7] . 

Recommendations 

Year 1 implementation of MIAEO has completed two tracks of research inquiries in 
network security and cryptography , and produced five poster presentations in 2013 REVS-UP 
session. New course proposals have passed approval processes at the department, school, and 


[7] http://president.csub .edu/index.cfm?fuseaction=menu&menu_id=65 
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university levels. A well-attended cybersecurity symposium has been organized to expand IA 
education for the general public. The multilevel evaluation of Year 1 implementation leads to 
four recommendations to sustain the ongoing progress. 

(1) Incorporate More Hands-on Activities in REVS-UP 

In 2013 summer, student and teacher participants indicated needs of incorporating more 
hands-on activities in REVS-UP. School administrators have been advocating alignment of 
school curricula with state-mandated paper-and-pencil tests in recent years, which inadvertently 
deprived student learning opportunities from hands-on exploration (Wang, 2013b). As 
professors of past REVS-UP projects indicated, “It remains true that students are attracted more 
to the STEM fields when applications and hand-on experiences are an integral part of the 
curriculum” (Meyer & Gasparayan, 2010, p. 77). 

Figure 2: Attitude Change in Crytography 

Response Item: Q6 - 1 am interested in cryptography (Blue: pretest; Red: posttest) 

q6 

disagree 
neutral 
agree 
strongly agree 

01 2345678 9 10 11 12 

FREQUENCY 



Nonetheless, when a Likert scale was employed to assess student agreement to a 
statement “I am interested in cryptography”, the mode of responses dropped from “agree” in the 
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pretest to “neutral” in the posttest (Figure 2). Qualitative comments from students, such as the 

one below, indicated that the interest decrease was not due to lack of team mentoring: 

Thank you Dr. Lam, and thank you Frank Madrid for the amazing experiences. Never 
thought I would learn so much in a program before. You altered my mentality, and you 
have inspired me. 

Hence, hands-on activities become a teaching approach to help reverse the interest change in 
Figure 2. 


(2) Recruit Qualified Teaching Assistants for the IA Program 

To implement the established curriculum, MIAEO has incorporated a plan of hiring 
teaching assistants (TA). While faculty qualifications are justified in the NSF proposal, criteria 
for TA hiring need to be constantly reviewed to strengthen the IA education capacity at CSUB. 

Since the whole could be larger than the sum of its parts, MIAEO might benefit from the 
support of other STEM projects across the campus, including posting advertisement at their 
websites and/or using their track records to help identify potential TA candidates. The 
requirements in the current job posting are: 

* Established Junior, Senior, or Post-Bacc standing 

* Declared major or minor in Computer Science, Computer Engineering or Mathematics 

* Completed the required 200-level courses for their Computer Science, Computer 
Engineering or Mathematics degree 

* Retained 3.0 GPA in their Computer Science, Computer Engineering and/or 
Mathematics courses 

Because the job responsibility is designated to support research and tutoring , past participants of 
REVS-UP or other STEM inquiry projects might possess additional research experiences to feed 
the TA pipeline. 


(3) Expand Community Outreach Approaches for Local Residents 
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From a systematic perspective, outreach activities span across multiple tiers of the service 
community. In particular, the majority of REVS-UP participants come from K-12 school 
community. In 2013 summer, 18 high school students collaborated on IA inquires in REVS-UP. 
The capacity can be expanded next year to accommodate 20 students according to the MIAEO 
budget planning. 

Unlike other IA courses, PLSI 377 is scheduled in evenings for community members to 
attend. In the first year, all students of this class came from CSUB. Thus, public awareness of 
the course offering can be expanded to attract more community members in the future. In 
addition, Cyber Security Panel Discussion is designed for the general public. Positive feedback 
from the first symposium has justified multiple offerings of similar learning opportunities each 
year. 

(4) Improve Student Engagement 

Improvement of student engagement hinges on a proper consideration of student 
academic preparation. For instance, regarding the Cyber Security Panel Discussion on May 15, 
2013, students of CMPS 340 indicated needs of focusing on specific topics, and their peers in 
PLSI 377 wished to see involvement of more people from various fields. Thus, no single 
approach can concurrently address the split requests pertaining to different “zones of proximal 
development” (ZPD) (Vygotsky, 1978). In this regard, student engagements are aligned with the 
dual emphases of science education (i.e., science for scientists and science for everyone) 
advocated by National Standards for Science Education (National Research Council, 2011b). 
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1. Crack Me If You Can: Using GPU Machines to Crack Passwords 

2. Defense Against Human Hacking 

3. Zero Knowledge, We Know Everything ... ! 

4. Elliptic Enigma 

5. Factor Fiction 


Department Crack Me If You Can: 

Computer Usin 9 GPU Machines to Crack Passwords 

Science Adrisot: Dr. Melissa Danhxth Assistant: AHonso Puga 


Background 

nwnicni 


Objectives and Methods 







Tafeb ' Nfrf ItXA aa*h » ar*M 4ct rd pn—iawj Iri 


TSI 

BC 

asi 

Uonei 

osac nn 

'imrv 1 £i,l 





«*»ec 0i(le 

l mi 1 1 tec *5?ft 

41 

imxiir jecot 

t.ir« u V iik 

P * 2 \ 

> . “V * VI '01 

tan Jw inr 

el »*« v. 

.* •» civ 

tan t nr i nr 

el'OJ 

'4V '4 Vt 

»an « iv H vc 

v>» 

if cr» 

!•* id nr 

e/ t-j 




am • am *•»***■• a* *tr « 


►MAorvcn 


iwacrjjtrci v. r nm;l« jmSeuu 

r«* »»rn I Vwrn naraii OP. c 
BfMMMMB 
I .mi ■mimriMaamra— « 

Hit limi»ae*wjinpa> ii r» n aMw 
vamatwiataif MitaaMkvrta 



Problems 



r xoi Uxsau»w/* wmi t aruM trca N ipte 

■ «tn( aa jf i ^tMWWsMiasaeaB 
• •mu in«M i*ai vircira irwi 

■ «i In a w a — tuw fcg m ««aW8«*<" WjmiW>»UN> mm 


Results and Conclusions 

t**» • t»C*YS ki\w& 


»ODCVm 

twa 

•nnou 

ATI 

vei 

carer art 

• nr 44 aac 

li ML iJU41 

'lore ti 

if sr» Mam 

MVC StVl 

Ktta^c : mearm 

: mi u.» 

HfVto .J' 

n«N4 

Caclorvt 

»nr ( vc 'ia*i 

»« wc ratal 

* ;ca.-<-' *an ifr 

n n- .**il 

inr.'i* t-" a»i 

inrorann 

» 3WI ll* 

■ - %• *•. 

MU 

IWjrart 

MV7?M 4' 0f 

•cvTjai 


turn ■ nnce 

I'.f XW Bbl 

• rvjevt "Hi 

» ic*-c ; ifem 

- 

?*> Tlrir -1 Vi 

■ 

Lac*rart 

;ffj.*vs5“ 

I4W in SO 

InrdiJHP 

irrVia 

a vt » B U 1 

■ kbm i in* atm 

kim»' m 

a nr • o aac not *i 


TV ATI «MfMr**V '**•*«» IRA *Ca <1 

. A* > VC *• QfJ tar* ar* *C« rae ca* ana 



: *j*b 3 O e c oa—y Time of Ow Choeen P w ccdi (Mil 




TW*»4 

TBS 

*v? 

• vc 

amr 

I *t MWl VC 

VUr 

i ve 

niarv: 

*f alien a vc 

arrvr 

' MC 

MS 

.XiVC 

•US 

It VC 

MsJ-.' 

r >• «v« vc 

x» *3 

'▼4* 

r-t>v 

i W trr v Xi 

a.-pc 

it;»» 




fj*mw of Srcna P — ac r d i 

-M>M» u ii y ti W^u.'L« A 4 Caftil 
n««liCNhDgO r { ntJaoMa** 



Acknowledgements and References 

•flKJNer a >icAW# | ati/ , eru • vr wne ptn 



Solutions 





25 


Department 
of CEE 

Defense Against Human Hacking 

Computer 

Science 

Austin Huynh. Dana Oran Marissa Ramrer, Ryan Motn. Victor Lin 
Advisor: Dr. Melissa Daniorth Assistant: Allonso Pugs 


Background 



Techniques 




© 

«-sy 

lUfftf'rll 


Chevron 


0 


Conclusions 

(•T Micrs * Wan r knejii TVou^i n 
it* mew «ngi« •< 1 m J m m a ilt Ok 


SOCIAL ENGINEERING 
SPECIALIST 


th»r» is no patch 
for human stupidity 


Acknowledgements 


SOCIAL 

OtGINCER’NG 












26 


Zero Knowledge, We know everything...! 



• Atotract • 


• rulShimu UnlkiM Pr.Exol • 


• ChtiEiacTh. Fut-Shiair Protocol • 



• BicLgrotud # 



i*» f i‘ '» ■ » i. 


mm. illh» fa» i ltan mm p«fa i< 0* 

rmy, teUHWpiMtPiiirilA 

hnmft » -C>— f L» > 'V wf *‘ 


# Cftrol Idea Behind Zero knowledge # 

Prwh 



hlaMfit AUahaataikhiifateauMiMDi R ■! 
\ faetottn «<-Mffabt.V~fa«faeWto*i«to 
im a— u hhw.^KM.iptuwb^*! 
Mfca pna M M <<ta*ntc« Ak« 


*-M*» J»M Qm< 4 hO«« AlWhi^a. 
te« R«3 iter m . V<S Jh»c 
r**v»* irAh«Mi* w.o-^m .4 


■ R«* IkM 

_*■•*<* fa. 


tu MeiipM w e 

miij'j 




TV .An* •» .«V h* fa«M. •imM|a4M V 

»«»x t* dixUw Vmi i»i k Vrfll»aMln RtJwiWw 

V Ot ■ > aton I ; « t i-l N*: teOM m dw )«.«» 

rw»o -v v m m i i *»* rm! » >m ■ <?*•:>' 

mmd MOOVi TWVt 


U Ok V*& «U<nl r— 4mi *i mrnim m|*i k« im f« fa M fa V 

>»*■*■ MhtbfahtfaUfaUi— < 

- - - ■ - 1 t » - ‘ , 

VurMhtoahifaUitPrtfa hi 

**rA (Mil II MM i i lie 

'nw^M«apcM^fa.a»«Ma«*«Mrf7ni«3ivf^tMMi io*»i 

«W fa tM SklBm^m Mfa H. fa Ml«. AMI IM* 

r^*(Mrf*v ■ 4 M ^ a rfriai)TWfaMfai<ur«M| 
fat !*•*•* **J* :<tnl IMOIi fa We* MM 


■ Mit m 

L IWIfam^wi 


«wl>l. « unfai fa <t 

pWI]7IM(«I0” 


ll.tfa«ifaC— >ih« jiy wfapfahUi faiMiMW'i 


CwDii-QantulfXCQ) Prolix ol < 




irC«H Mia 


KM faM /*• Ufa it. «* 
iM^fa«f>a.«* i 'iV aiiiildfatMli 

TV .Am M|itli —fa ym. 3? TV fail >«(U • 

wm4 HACrfj 


HaMLtffa l fa ai -Hfahfa^imayfa 

a>4«i>,«fa:;*:w ran tv .a*i» • a 

*f • Mtn^v «m 4 ran 


V(WWOh 


MO<>HM^ayM W . ■ ■■.»! faMMll 
, 4 fa!« 4 kM^ 


1 «MM fa> f — , mI . fariMM'M AMIfaM /•Mini 

akaallVafani-iqiuii 4’ -r»fa|Wfafa. TV 
llMfaiwi..|wnWfa VfalV Bn iW jafaMnl. «■ fata* 
AntaofM . mttmmkm, n .01 . . lent ifau. TW 
»%fa> ► ..Ukiiwfei ^ faErnn 

TV pnMMlM » m napal •fa.H’-lialll 

• IV ( Imm Km* fa ala V WWfa* wm> laM* r Vfa 

|hhll>Mfa>>«faUf<h 

. ClMMl aafa far e|Mli. T • r\wmi Uhfa fa fa 

• TV Vtaifta faMkiwtaMfa T J - 1 

• !WClMMnawn«i^nii faVlhfafafa 

• 

• *T»T Mlt-yfaMoh h..«n* 



TWfaAl.aa m $im VfaV-fa 
to fast. 

• Fifaie Research 



27 


CWl»» '•* • w 

Mllfl 


Elliptic Enigma »* 

■ W o 





yj 

run y nurrtaiKpvTR 
l.tCCtei -oa wa* X«*cr«e t«r a 


uoroaue rout* Mrkrc "aMrc. md 
jowu- m ur r^TKtxiwtamlCCNa^MI 

■ftarct. IMMMII p»tr- w »«3«CU 
irwtrfl|,hM(u%cw0h mikwyiMW 


Unjf cOr» ar* unjc war*. -c ipend trcyptrx ■> 
«wij" ire uur% a*.: Diln n unw>o*v R SA 
no Zk r :*&xncfy rmn an *»• (nfera'a; 
■icir% Mr«k mi uc* i Qor rw i -tf*ce ’ua n ar 


«!%«« U*» **• ' 


a urtmi K vxv9ng fe 
, - T l f — |-t kuerlCC ia»*^nir«ir«in 

omaeaan fla w^mtiwyy < cr 
y«nueei > vd«nuisa 


nsu«a« 

Sr™” 


Ml •nuypHM (CC ■ m*i Mue «« 


tmaoMtr .« » »,and *,.f>*9 0 

rwr* -w 

(f^ *• • anfl *» /r? 


Kfl * #,«rur»f • .• 

m«i 2* - («« M i 

*w Pk=Mt. J 


a*inn -u-g - m !•%* 





28 


Ti i.i I D'VImou 



Factor Fiction 




Pol IKl s PI 


sriua _______ 

■■MBJBiliMiinatBilMBM 

gc. * r y~. er<90'pc=9>i£i».c'TS»vs^ri 

--v.: - mm m wiiia bmi 

«aei rjat pc*. « r*« ;a bcj *i-a> sea f 
necc(aiQ»i{Mr.n«:bit 



srMasa 





